Threshold room / time boundary

One frozen feed.
One violent update.

The countdown marks a known market transition. SALVOR does not control the feed, select the price or declare a position liquidatable.

NEXT ORACLE UNFREEZE · 04:00 ETWINDOW ARMEDROBINHOOD CHAIN · 4663

--:--:--:--

FROZEN STATE · MODEL ONLYREFRESH → MARKET VERDICT

NEXT WINDOW--:--:--:--

BEFORE ZEROMODEL

AT ZERORE-READ

AFTER ZERORACE

FIELD LOG / 01

How a position reaches the line.

One position passes through three different states. The interface changes its language at each step so a scenario can never masquerade as a market fact.

01 · QUEUED

Known position

Debt, collateral and current health are read from one block.

02 · CANDIDATE

Modelled crossing

A chosen price shows where health could pass below 1.00.

03 · VERDICT

Market-enforced

The refreshed contract state either accepts liquidate() or reverts.

VIOLET · SCENARIO SPACELIME · VERIFIED THRESHOLDNO PRICE SIGNAL · NO CUSTOM ORACLE

Inside the threshold room

A queue becomes a transaction only after the line is real.

Before the update, SALVOR can model. After the update, it must forget the model, read the market again and let the lending contract make the only decision that counts.

ORACLE STATEFROZEN / OBSERVED

SCENARIO STATEUSER-CONTROLLED

MARKET STATEENFORCED ONCHAIN

EXECUTION STATEFIRST VALID CALL

Anatomy / three kinds of truth

Every number has an owner.

The interface separates facts read from chain, values chosen for a scenario and outcomes enforced by the market. Mixing them would make the board look confident exactly when it should be cautious.

01 / OBSERVED

The frozen frame

Collateral, debt, LLTV, oracle value and updatedAt are read against one displayed block. This is the only current state before refresh.

SOURCE · MARKET + ORACLE

02 / MODELLED

The candidate print

A user-selected post-unfreeze price recomputes health and crossing order. It is useful preparation, never a forecast or trigger.

SOURCE · USER SCENARIO

03 / ENFORCED

The market verdict

At execution, liquidate() succeeds or reverts under the market's own rules. SALVOR cannot override that verdict.

SOURCE · TRANSACTION

Operating window

What changes around zero.

The countdown is not theatre. Each phase changes which data can be trusted and what the caller should review.

T−30 MIN

Build the queue

Read all positions, remove closed state and order candidate crossings by estimated net bounty.

T−05 MIN

Check funding

Confirm debt liquidity, swap route, gas ceiling, minBounty and transaction deadline.

T±00

Discard the model

Refresh oracle, debt and collateral. Rows arm only from the new market state.

T+01 BLOCK

Read the receipt

Only a settled event becomes a fill. Every unsuccessful attempt remains outside the tape.

Evidence matrix

What the interface may claim.

A concise map of the source, status and limitation behind each number shown around the threshold.

FIELD

SOURCE

STATUS

LIMIT

HEALTH NOW

Market state at block

Observed

Stale after state change

HEALTH AT UPDATE

Candidate input

Modelled

Not a forecast

CROSSING PRICE

Debt · collateral · LLTV

Derived

Assumes other state holds

NET BOUNTY

Incentive − route costs

Estimated

Gas and slippage move

LIQUIDATABLE

Market liquidate()

Enforced

First valid caller wins

One frozen feed.One violent update.